Deployment Architecture
Highlighted

Can index storage be used as Google cloud storage?

Engager

Hi, splunk.

I am going to use the index storage space as Google cloud storage.

I installed Splunk and mounted the Google Cloud Storage FUSE on the index storage.

I had no problem creating the index by setting it to that path, but it does not start when you restart your Splunk.

I think the problem is in permissions while using Google Cloud Storage FUSE.

I don't know how to solve this problem.

0 Karma
Highlighted

Re: Can index storage be used as Google cloud storage?

SplunkTrust
SplunkTrust

If the filesystem used is supported, it should work in theory. See here: http://docs.splunk.com/Documentation/Splunk/6.5.1/Installation/Systemrequirements#Supported_file_sys...

I suspect that it isn't a supported filesystem, which will cause Splunk to run something called "locktest" on it. If Splunk is unable to acquire a lock then it will not allow you to utilize the storage. See here: https://docs.splunk.com/Documentation/Splunk/6.5.1/Troubleshooting/CommandlinetoolsforusewithSupport...

Lastly, I don't know much about Google Cloud Storage FUSE, but i suspect performance may be an issue. I'd use caution even if it does work correctly. Based on what i'm reading here: https://github.com/GoogleCloudPlatform/gcsfuse#latency-and-rsync I'd be concerned with performance characteristics.